Yes, but if ads do it, that would at worst make the ad server vulnerable, not yo... | Hacker News

Hacker News .hnnew | past | comments | ask | show | jobs | submit

xg15 18 days ago | parent | context | favorite | on: Developers don't understand CORS (2019)

Yes, but if ads do it, that would at worst make the ad server vulnerable, not your server.

Beltiras 18 days ago [–]

You apparently understand less than me. The little I do understand is that CORS is protection for a site's user, not the site.

TeMPOraL 18 days ago | [–]

It's a protection of site's business model.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact